QoS for SIP on Cisco Router (1841)

Hello All!

We have some hosted PBX customers that have been experiencing  voice quality issues while using cable and DSL circuits.  We need to get some type of QoS configured on the edge device and/or phones themselves.  We need keep voice traffic as priority to keep voice quality high during high circuit utilization.  

Here is a typical setup:

- Cisco 1800 series router (mostly 1841's) as the edge device
- VPN from customer site to our VPN concentrator
- Grandstream GXP2100 phones

Any ideas?
Good tricks for Cisco router to handle QoS well?
FrankkadafAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

arnoldCommented:
Is the issue on your side is network saturation?
http://www.cisco.com/en/US/technologies/tk543/tk759/technologies_white_paper0900aecd80295aa1.pdf

Your issue might be on the inbound which a QoS on your side might not be managed.
0
Sandeep GuptaConsultantCommented:
Would you mind to share configuration of your router?

Generally you can set auto-qos in secured VPNs.
0
FrankkadafAuthor Commented:
Here's a general configuration of our routers. Some of them have additional IPSEC transport mode configuration (no left/right subnets) which shouldn't make a difference, traffic is still going over a GRE tunnel.
tpl.txt
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

arnoldCommented:
If your voice travelers through VPN, you would prioritize VPN traffic and within the VPN prioritize VOIP/sip/voice traffic.
0
FrankkadafAuthor Commented:
Our issue is we cannot control ingress traffic. We want to shape ingress traffic as some cases clients will be downloading files and it will cause poor voice quality.
0
arnoldCommented:
You can control what is leaving your network or entering, by prioritizing specific traffic such that VOIP/SIP will have a higher priority while other traffic will be "dropped"

Rate-limiting might be another way to control network use. I.e. A fileserver can only transmit at max rate of 10% of available bandwidth, etc.

QoS can be managed within to a point. Once the traffic leaves your network, there is nothing you can do.
0
FrankkadafAuthor Commented:
We've tried prioritizing tunnel traffic (GRE going out our WAN interface) but there are still some problems, such as when customers perform multiple concurrent downloads (i.e. Windows updates all firing at once). In that sort of case, the amount of downstream traffic causes voice quality issues due to high latency and bandwidth utilization. We want to find some way to limit the incoming traffic.
0
arnoldCommented:
It is a multi-tiered Qos
The issue is that I am unclear where or how your VOICE travels
if all goes via VPN, then you will prioritize the VPN
wihtin the VPN you will prioritize VOICE
you would rate limit HTTP/ftp/streaming if not deny them.

I think I had this discussion recently in another question, that dealt with being able to apply QoS on one direction only.
Usually, the incoming is separate from outgoing the bandwidth available for incoming might be larger than outgoing (Asynchronous 1.5MB inbound/768 outgoing) versus synchronous meaning you have the same rate inbound as outbound.

An option for updates etc. might be to setup an internal WSUS server and manage its download on a schedule/approval.
0
FrankkadafAuthor Commented:
How would we prioritize any traffic to/from a particular IP address? We want to set it up so it will prioritize queuing packets for the VPN concentrator and drop anything else.
0
arnoldCommented:
You would not prioritize base on IP destination, but based on the packet type.

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND/IPSecQoS.html

Your best bet is to check cisco.com for various examples.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Voice Over IP

From novice to tech pro — start learning today.